Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k3K8P9Fp3iI6nie3a0yeOjBFw6o.roa
File: k3K8P9Fp3iI6nie3a0yeOjBFw6o.roa (raw, json)
Hash identifier: xnCx9nrwPWESgktLmchhT+UYwngarzuTg/0WarqxAD0=
Subject key identifier: 93:72:BC:3F:D1:69:DE:22:3A:9E:27:B7:6B:4C:9E:3A:30:45:C3:AA
Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Certificate serial: 018CC80123A03963AA3B179762586B553BFE
Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k3K8P9Fp3iI6nie3a0yeOjBFw6o.roa
Signing time: Tue 02 Jan 2024 02:29:27 +0000
ROA not before: Tue 02 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204954
IP address blocks: 91.244.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:23:a0:39:63:aa:3b:17:97:62:58:6b:55:3b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9372bc3fd169de223a9e27b76b4c9e3a3045c3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:12:7e:40:53:da:c1:24:c2:02:94:63:38:
d5:ef:4f:8a:09:cb:b1:82:39:10:9a:a3:32:a0:43:
59:a1:ff:9f:8a:40:ce:8d:4b:f4:8a:7f:53:12:96:
bc:39:ee:c3:02:61:d4:3a:89:b4:45:f3:f1:f2:58:
ae:85:67:8e:16:0c:8e:c3:69:36:3f:54:07:6f:f3:
bf:db:7f:34:8b:8d:8b:7a:be:4f:e8:bc:89:b2:95:
4d:99:b6:ae:dc:21:88:77:3b:e6:4e:93:2b:ea:03:
f3:4c:10:f5:f9:9c:1d:ba:5f:53:bc:63:b3:e5:41:
6b:e1:ab:c1:cf:79:1e:6e:eb:d9:44:bb:93:63:ba:
f7:97:5d:12:28:e3:fe:61:8b:bb:31:9f:ca:9b:fc:
27:b8:7d:f1:33:6e:7d:ac:36:8b:c0:00:86:ed:8d:
01:83:0e:d9:5a:f8:64:a5:c5:bc:bc:c5:b9:fb:f0:
98:fc:59:85:39:f7:57:ff:53:5a:fd:40:15:b2:21:
1a:36:56:df:18:37:b0:d6:22:b9:2c:89:ad:fd:7c:
9e:96:35:95:77:22:3b:e2:f2:60:b7:00:8e:be:82:
33:b7:28:10:89:b3:07:2c:72:2a:cf:57:db:f1:09:
60:ff:de:c1:d1:12:7e:3a:1e:40:17:0a:4e:b3:78:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:72:BC:3F:D1:69:DE:22:3A:9E:27:B7:6B:4C:9E:3A:30:45:C3:AA
X509v3 Authority Key Identifier:
keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k3K8P9Fp3iI6nie3a0yeOjBFw6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.126.0/24
Signature Algorithm: sha256WithRSAEncryption
82:5d:32:82:3c:a6:1c:83:c3:2e:06:54:eb:15:dd:2e:cf:b1:
ca:45:1c:7f:4f:be:b5:58:24:ea:3f:60:71:b3:25:2f:79:5a:
c0:c8:14:bc:04:32:f5:69:cb:b8:1e:a0:9b:c8:b1:c0:02:4f:
3f:f9:9c:59:f1:3c:c1:21:48:8b:63:c3:84:52:1f:f9:10:c7:
2c:43:ea:47:19:e5:3f:0c:e4:71:25:b4:c4:33:9a:3a:0b:81:
c2:22:9e:be:5f:88:39:75:89:dc:74:5e:fc:a2:7f:55:ee:35:
2e:85:f9:a4:ff:e3:58:4c:36:12:68:e2:1c:f9:c1:d4:66:2d:
16:16:44:4e:80:0c:e1:3f:06:70:44:05:76:55:f5:2f:eb:bf:
85:c3:d7:17:69:fe:93:5f:f4:a7:23:50:62:ff:3b:b6:9f:48:
2a:06:da:3e:3e:04:a4:4a:e2:8d:8a:f4:5c:2c:de:ee:3c:49:
14:7d:89:02:55:94:d1:0f:2f:0e:2e:ff:61:99:9b:da:78:ef:
a2:61:6e:e5:97:a7:51:94:9f:0f:55:87:22:05:bd:d9:54:21:
d9:55:ab:ed:a1:53:a3:1c:40:a7:36:40:23:f5:ef:43:2e:a2:
d5:54:39:f4:07:5d:d0:0d:4d:5d:7f:b5:40:b7:90:28:c9:8a:
44:17:6d:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIASOgOWOqOxeXYlhrVTv+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYzVmMTBhZjhiY2I1ZmM2ZTM0YTQ3M2I0YTZjYWU3YWQw
MmQ5MDIwHhcNMjQwMTAyMDIyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzcyYmMzZmQxNjlkZTIyM2E5ZTI3Yjc2YjRjOWUzYTMwNDVjM2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0ASfkBT2sEkwgKUYzjV70+KCcux
gjkQmqMyoENZof+fikDOjUv0in9TEpa8Oe7DAmHUOom0RfPx8liuhWeOFgyOw2k2
P1QHb/O/2380i42Ler5P6LyJspVNmbau3CGIdzvmTpMr6gPzTBD1+Zwdul9TvGOz
5UFr4avBz3kebuvZRLuTY7r3l10SKOP+YYu7MZ/Km/wnuH3xM259rDaLwACG7Y0B
gw7ZWvhkpcW8vMW5+/CY/FmFOfdX/1Na/UAVsiEaNlbfGDew1iK5LImt/XyeljWV
dyI74vJgtwCOvoIztygQibMHLHIqz1fb8Qlg/97B0RJ+Oh5AFwpOs3jX3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJNyvD/Rad4iOp4nt2tMnjowRcOqMB8GA1UdIwQY
MBaAFJPF8Qr4vLX8bjSkc7SmyuetAtkCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYTAyY2ItYjM3OC00ZmE3LTg4MDMt
OGVhYWQwYjA0OWE3LzEvazNLOFA5RnAzaUk2bmllM2EweWVPakJGdzZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mYTAyY2ItYjM3OC00ZmE3LTg4MDMtOGVhYWQwYjA0OWE3
LzEvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/R+MA0G
CSqGSIb3DQEBCwUAA4IBAQCCXTKCPKYcg8MuBlTrFd0uz7HKRRx/T761WCTqP2Bx
syUveVrAyBS8BDL1acu4HqCbyLHAAk8/+ZxZ8TzBIUiLY8OEUh/5EMcsQ+pHGeU/
DORxJbTEM5o6C4HCIp6+X4g5dYncdF78on9V7jUuhfmk/+NYTDYSaOIc+cHUZi0W
FkROgAzhPwZwRAV2VfUv67+Fw9cXaf6TX/SnI1Bi/zu2n0gqBto+PgSkSuKNivRc
LN7uPEkUfYkCVZTRDy8OLv9hmZvaeO+iYW7ll6dRlJ8PVYciBb3ZVCHZVavtoVOj
HECnNkAj9e9DLqLVVDn0B13QDU1df7VAt5AoyYpEF23m
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:08:23 2024 by rpki-client on console-ams.rpki-client.org